Privacy Policy

Account information. When you claim a membership we collect your email address, a display name, and a password (stored in hashed form by our authentication provider — we never see it).

Profile information you choose to share. Your avatar, bio, and any social or payment links you add to your profile are provided voluntarily and are visible to other members.

Content you post. Posts, comments, articles, marketplace listings, lounge messages, photos, and direct messages are stored so the service can function. Direct messages are visible only to their participants.

Age confirmation. A cookie recording that you confirmed you are of legal age. We do not collect or store your date of birth. If we implement a date-of-birth entry gate solely to verify age before granting access, that date is used only for the gate check and is not retained in our systems.

We do not sell your personal information. We do not run third-party advertising or tracking networks. Promotional placements you may see in the feed are house ads managed by the Estate itself.

We use only functional cookies: a session cookie that keeps you signed in and a cookie recording your age confirmation (30 days). No analytics or advertising cookies are set.

We rely on a small number of providers to operate the Estate: Supabase (database, authentication, and file storage), Vercel (hosting), Resend (email notifications), and Giphy (GIF search in the Lounge — your search terms are sent to Giphy when you use that feature). Each receives only what it needs to provide its service. Data is processed in the United States.

We send transactional email tied to your account activity — mentions, comments, direct messages, watchlist and raffle notices. You can manage or disable these in your profile settings, or contact us to opt out.

When you engage in a transaction with another member, you may share personal information (such as your shipping address and payment details) directly with that member. The Estate does not facilitate, control, or monitor that exchange, and is not responsible for how the other member handles your information. We encourage you to exercise caution and share only what is necessary.

We may disclose account information, content, and transaction records to law enforcement, tax authorities, or regulatory agencies if we believe in good faith that doing so is necessary to comply with a legal obligation, to investigate suspected illegal activity (including underage sales or violations of tobacco-shipping laws), or to protect the rights, property, or safety of the Estate, its members, or the public.

We keep your information for as long as your account is active. You may delete your own posts and listings at any time. To delete your account and associated personal information, contact us at support@tobaccoestate.com; we will action verified requests within 30 days, except where we must retain records to comply with law or resolve disputes.

Depending on where you live (including California and the European Economic Area), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@tobaccoestate.com. We will not discriminate against you for exercising them.

The Estate is for adults of legal smoking age in their jurisdiction (and in all cases 18 or older). We do not knowingly collect information from anyone under that age; if we learn we have, we will delete the account.

We may update this policy from time to time and will note the date above. Material changes will be announced on the site. Questions: support@tobaccoestate.com.